About the Client
The client is a large global enterprise operating across multiple markets, with a complex technology landscape and a strong focus on digital transformation and innovation. It is investing in modern cloud, data, and AI capabilities to enable scalable, secure, and highly automated solutions across its business.
Responsibilities
•Own the Azure technical roadmap, reference architectures, standards, and reusable implementation patterns
•Lead architecture and design reviews, make pragmatic technical decisions, and communicate trade-offs clearly
•Mentor engineers, strengthen peer review, and reduce dependency on individual subject-matter experts
•Design, evolve, and operate enterprise Azure Landing Zones, including management groups, subscriptions, identity, policy, shared services, and workload guardrails
•Implement policy-driven governance, RBAC, privileged access, tagging, compliance monitoring, and security-by-design controls
•Partner with Security, Architecture, and Compliance teams to remediate risks and maintain audit-ready evidence
•Drive Infrastructure as Code and automated lifecycle management using approved enterprise tooling, Git, and CI/CD pipelines
•Build self-service subscription and platform capabilities with clear product interfaces, documentation, and operational ownership
•Control configuration drift, improve repeatability, and minimise manual operational work
•Establish observability, operational readiness, backup and recovery, and incident-management standards
•Lead complex troubleshooting, root-cause analysis, and engineering improvements arising from incidents and problems
•Optimise resilience, performance, and cost through capacity management, FinOps practices, and measurable service outcomes
•Translate strategy into a prioritised backlog; identify dependencies, risks, owners, and escalation paths
•Coordinate delivery across squads and stakeholders while maintaining architecture, security, and engineering quality
•Represent Cloud Hub in Azure decisions and explain technical recommendations to engineering and business audiences
Requirements
•Five or more years in cloud infrastructure, platform engineering, DevOps, or SRE, including at least three years of hands-on Azure experience
•Proven experience designing and operating enterprise, multi-subscription Azure platforms and Landing Zones
•Strong knowledge of management groups, Azure Policy, Microsoft Entra ID, RBAC/PIM, Azure Monitor, Log Analytics, and cost controls
•Strong Azure networking experience with hub-and-spoke or Virtual WAN, VNets, routing, DNS, NSGs, Private Endpoints, firewalls, and ExpressRoute/VPN
•Production experience with IaC tools, Git-based delivery, CI/CD, and scripting such as Python or PowerShell
•Demonstrated technical leadership, mentoring, stakeholder influence, and delivery in a global enterprise environment
Nice to Have
•Microsoft Certified: Azure Solutions Architect Expert, Azure Administrator Associate or Azure Security Engineer Associate
•Experience with multi-cloud environments, platform-product operating models, SRE practices, and organisational change
Conditions
No conditions specified in the posting.
